npm/@openclaw/matrix CVE-2026-100582: medium 6.5, EPSS 0.21%
OpenClaw: Channel read actions could skip target allowlists
Action: Upgrade @openclaw/matrix to 2026.8.1 or later.
npm i @openclaw/matrix@2026.8.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2026.8.1 | - |
Fixed versions
| 2026.8.1 |
Sources
- osv: GHSA-g7fw-3gjp-g5hf#npm/@openclaw/matrix
- https://github.com/openclaw/openclaw/security/advisories/GHSA-g7fw-3gjp-g5hf
- https://github.com/openclaw/openclaw/pull/99905
- https://github.com/openclaw/openclaw/commit/fbd330b7aa4a26726fa8468f0db2a23ada3843bd
- https://github.com/openclaw/openclaw
- https://github.com/openclaw/openclaw/releases/tag/v2026.8.1
CVE-2026-100582 · published · modified · JSON